Privacy Policy

1. Who we are

Paperbeam, Inc. (“Paperbeam”) provides an AI-written internal company newspaper. This policy explains how we handle personal data when you visit paperbeam.ai, try our demo, or use the Service. Contact: privacy@paperbeam.ai.

2. Two roles

• Controller for data about website visitors, prospects and the people who manage customer accounts (for example, billing contacts and admins).
• Processor for Customer Data: the content we read from the tools a customer connects, and the editions we produce from it. For that data, our customer decides what is processed and why, and our DPA applies.

3. Website visitors

When you visit our site we collect:

• standard request data such as IP address, browser and pages visited, used for security and to run the site;
• product analytics through PostHog, configured to be cookie-light. Where consent is required, non-essential analytics load only after you agree;
• anything you choose to send us, such as your email when you sign up or write to us.

4. The “See your paper” demo

When you enter a company website in the demo, we fetch that site’s public homepage to read its name, logo and brand color, and render a sample paper using fictional demo stories. We do not read anything behind a login, and we do not connect to any of your tools. The fetched details are held only in a short-lived cache to keep the demo fast and are not stored beyond it. We do not link the domain you enter to you unless you go on to sign up. The demo is rate-limited to prevent abuse.

5. Account data

When you sign up we collect your name, work email and company domain (usually from Google or Microsoft sign-in), and billing details, which are handled by Stripe. We use this to run your account, bill you, send service messages and, if you agree, occasional product updates.

6. Customer Data

We process Customer Data only to provide the Service to the customer that connected it, as described in our Terms and DPA. In short:

• Raw source content is kept for a short window, then deleted; derived facts and short excerpts power the archive.
• Customers configure retention, and data is deleted after cancellation according to our retention policy.
• We never use Customer Data to train AI models, ours or anyone’s. Our AI providers process it under zero-data-retention terms where available, and customers can restrict their workspace to such providers.
• We do not sell Customer Data or use it for advertising.

7. Sharing

We share personal data only with service providers who help us run Paperbeam, listed on our subprocessors page, when required by law, or as part of a merger or acquisition with notice to you.

8. International transfers

We are based in the United States and our providers primarily process data there. For transfers from the EEA, UK or Switzerland we rely on the Standard Contractual Clauses and equivalent safeguards.

9. Retention

We keep account data while your account is active and for a reasonable period afterward to meet legal, tax and accounting obligations. Website analytics are kept in aggregate or deleted on a rolling basis.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict certain processing. Write to privacy@paperbeam.ai. If your request concerns Customer Data, we will pass it to the relevant customer and help them respond. You can also complain to your local data protection authority.

11. Security

We protect data with encryption in transit and at rest, tenant isolation and access controls. See our security page for details.

12. Children

Paperbeam is a business service and is not directed to children under 16.

13. Changes

We will post changes here and update the date above. For material changes we will notify account admins in advance.